1997 Jeep Wrangler Sahara Sport Utility 2-door 4.0l on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Ford will put solid axles under the Bronco as the off-roading gods intended

We've been wondering what sort of creature the Bronco would be since we first heard of the thing last October, when a union chairman spilled the beans on the SUV and the Ranger pickup. Ford confirmed a 2020 arrival date for the Bronco at the 2017 Detroit Auto Show, but at that point pretty much all we were sure of was that the Ranger and Bronco would be returning. The open question would be how hungry Ford was to spoil the Jeep Wrangler's solo party as a compact(ish) off-roader with dual solid axles, since the easiest thing would be to carry over the suspension design of the presumably related international Ford Ranger and its Everest SUV version: independent front suspension with either a leaf- (Ranger) or coil-suspended (Everest) solid rear axle. Enter Dana, the long-time supplier of Jeep stick axles, to confirm that the 2020 Bronco is getting a pair of them. That means solid axles front and rear, just like under a Wrangler. So reports Automotive News, citing an investor presentation from Dana. All signs so far, such as the report that the Bronco would be engineered by the same team in Australia that created the Ranger pickup, indicated that the Bronco would share a platform with the Ranger and thus be body-on-frame. The solid axle confirmation essentially confirms that theory. Some off-road-capable vehicles have paired solid axles with unibody frames, like the Jeep Cherokee (XJ generation) and Grand Cherokee (ZJ and WJ generations), but they are outliers. Generally, if you've got solid axles at both ends, they're going in a vehicle with a ladder frame. It also lends credence to the notion that our Bronco won't simply be an imported Everest, which might be too understated to stand out from lesser crossovers anyways. This is good news if you have Blue Oval in your blood and pine for a modern SUV that'll show up the Jeep guys on the trail. Less directly, it could mean a wholesale assault on the formula that makes Jeeps successful in the first place: the massive aftermarket of off-roading equipment and dress-up bits that appeal to Jeep buyers almost as much as a Trail Rated badge. At a minimum, Bronco enthusiasts can breathe easy that the reborn SUV won't merely be a light-duty crossover with styling "inspired" by true off-roaders. There's still a lot left to learn about the Bronco. Keep up to date with our running summary of everything we know about the returning off-roader.

Massachusetts man charged $48,000 for a tow [w/video]

Tow truck operators are right up there with landlords and IRS auditors on the list of professionals you don't want to deal with. A man in Massachusetts has all the more reason to avoid a tow after he was hit with a $48,000 bill, Fox 25 reports. Joel Ramer and his girlfriend were off-roading in Walpole, MA last week when they wandered were they shouldn't have. They landed in a mud pit on private property. Ramer said it took Assured Collision towing company 12 hours to free his vehicle from the muck. But when he got the bill for the tow, he thought the accounting department must have been off by a decimal. "When I went to pick up the vehicle from Assured Collision, he'd informed me there was some damage done to the vehicle, but didn't get into details. He also informed me the bill was $48,000," Ramer told Fox. "I thought they made a mistake." The phrase 'some damage' was putting it lightly. Ramer says Assured Collision totaled his Jeep. "Frame is broken, leaf spring is broken, drive shaft is broken," Ramer said. The itemized bill showed Ramer exactly what he was paying for. Assured Collision charged him $16,000 for an on-scene supervisor. That's $1,250 an hour. The Statewide Towing Association told Fox 25 that the actual industry standard is $175-$325 an hour. The company also claimed that power lines put them at risk, calling it a "hazmat situation." That allowed them to tack on another $5,000 fee for dangerous condition liability insurance. Finally, there was an extra $10,000 fee for an off-road recovery incident response unit. Insurance won't help with the cost of the tow, so Ramer's broke Jeep is in Assured Collision's hands. On top of the enormous bill and busted Jeep, Ramer was arrested and cited for trespassing on land owned by a utility company and disturbing the peace. Boston News, Weather, Sports | FOX 25 | MyFoxBoston